RE: Remote Access (Again)

 Oh gosh Scott, thats like standing on a bridge over the LA Freeway and
picking out cars by their license plate numbers.  Its possible, but how real
a threat is it for most businesses?

If I am looking for data on a particular company I'll go to the company, not
try to scan the internet for their packets.

The only reason I am pursuing these messages is because I believe these
reactions are instilling a cult of fear into our IT departments, and in the
end business pressures are going to force us onto the web.  The risks will
be taken and the IT people that act with fear and panic will be replaced.
The internet vandals and thieves will be seen as a business risk just like
the real world vandals and thieves.

---------------------------------------------------------
Booth Martin   http://www.MartinVT.com
Booth@MartinVT.com
---------------------------------------------------------

-------Original Message-------

From: midrange-l@midrange.com
Date: Wednesday, December 04, 2002 02:47:50 PM
To: midrange-l@midrange.com
Subject: RE: Remote Access (Again)

You're right... sort of... it doesn't have to be on your LAN or on
your ISP's LAN... It can be anywhere that the packets get sent through.
But you're right, it can't just be anywhere on the internet, only a
machine along the packet route.

Do a traceroute from the remote computer to the AS/400. Assuming that
the ISPs firewalls allow traceroutes, each line of the output will be
one gateway that the packets travel through.

So, any computer on the same LAN with any of the listed gateways could
be sniffing your packets.